eSecurity Planet

MAY 30, 2024

Jeremy Nichols, NTT Security Holdings Director, Global Threat Intelligence Center, recommends that “healthcare providers need to strongly assess supply chain providers, third party integrations, and customer and insurance web portals.

Healthcare

eSecurity Planet

APRIL 29, 2024

Destruction of forensic artifacts will prevent incident response investigations and criminal investigations, and could affect cybersecurity insurance processes. The problem: Progress Software released patches to fix CVE-2024-2389 in their Flowmon network performance and security software tool.

Firewall

Thales Cloud Protection & Licensing

FEBRUARY 15, 2023

Ransomware attacks have become much more dangerous and have evolved beyond basic security defenses and business continuity techniques like next-gen antivirus and backups. The problem is that businesses are not yet aware of double or triple extortion ransomware and how these tactics can affect their data protection strategies.

Ransomware

eSecurity Planet

AUGUST 4, 2023

For example, the Health Insurance Portability and Accountability Act (HIPAA) only applies to organizations that transmit, store, or receive health data. In some cases, the vendors will offer certificates, such as System and Organization Controls Type 2 (SOC 2), that can be used to satisfy some compliance criteria.

Cybersecurity

eSecurity Planet

APRIL 29, 2024

How to Integrate IRM with Compliance & Regulatory Requirements All data security compliance and regulation requirements focus on specific risks for specific assets. For example, the Health Insurance Portability and Accountability Act (HIPAA) regulates personal health information and imposes fines for data breach or data inaccessibility.

Risk

SC Magazine

JUNE 29, 2021

For example, amid the heightened COVID-19-related cyberattacks in the initial months of the pandemic, the HHS Office for Civil Rights released a list of privacy and security resources to help providers bolster security defenses and prevent violations of the the Health Insurance Portability and Accountability Act.

Healthcare

eSecurity Planet

JANUARY 5, 2024

For example, if the firm handles healthcare data, the firewall policy must comply with the Health Insurance Portability and Accountability Act (HIPAA) to protect patient information and ensure compliance. This displays the organization’s dedication to legal and regulatory norms, lowering the danger of legal ramifications.

Firewall

eSecurity Planet

DECEMBER 7, 2023

For example, The Health Insurance Portability and Accountability Act (HIPAA) requires security features such as encryption to protect patients’ health information. The Family Educational Rights and Privacy Act (FERPA) requires encryption or equivalent security measures to protect private student records.

Encryption

Security Boulevard

JANUARY 18, 2024

Organizations first looked to augment their existing web application security tools and processes to “address” API security. Unfortunately, the security challenges associated with APIs can't be solved by simply updating existing testing tools and edge security defenses to check-the-box technologies that claim to provide "API security."

Risk

eSecurity Planet

MAY 2, 2024

Breach damages of $300k to $1 million may be within the risk tolerance for some, and many may expect to recoup damages from cybersecurity insurance. Overloaded Alerts 1Password found that 32% of their surveyed security professionals switched security tools or vendors in the past year to ones that provide more complete end-to-end solutions.

Cybersecurity

eSecurity Planet

APRIL 26, 2024

Defense in Depth Defense in depth assumes that any single security control may fail. Additional security layers implement effective controls and assure data confidentiality by adding additional insurance against breaches, zero day vulnerabilities, or tool failure.

Architecture

eSecurity Planet

SEPTEMBER 16, 2024

Example: “This policy is in accordance with the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), and other applicable data protection regulations. All cloud services and operations must comply with these standards to secure personal and sensitive data.”

Risk

CyberSecurity Insiders

DECEMBER 8, 2021

Have hope that through the hard work and brilliant minds behind these security defenses that 2022 will not be a repeat of such high level attacks. Learn more about what security leaders have to say about the upcoming year below: Neil Jones, cybersecurity evangelist, Egnyte.

Data breaches